Patron Insurance confirms data breach after Akira ransomware attack exposes sensitive information

Patron Insurance Services, an independent insurance agency based in Virginia, has confirmed a data breach after detecting suspicious activity within its network on May 23, 2025. An internal investigation revealed that an unauthorized actor gained access to files containing personally identifiable information and protected health information of an undisclosed number of individuals.

According to the company’s official notice of data security incident, the compromised data included names, addresses, Social Security numbers, driver’s license numbers, federally issued identification numbers, financial account details, and health information.

On June 12, 2025, the Akira ransomware group claimed responsibility for the attack on its Tor-based leak site. The cybercriminals alleged they had obtained approximately 7 gigabytes of Patron’s data, which they claimed included personal records, financial information, contracts, agreements, and non-disclosure documents.

Following the discovery of the breach, Patron Insurance Services said it took immediate action to secure its systems. The company reset all user passwords, restored operations using clean backups, and implemented enhanced endpoint monitoring and detection tools. Patron has begun notifying affected individuals by mail and is offering free credit monitoring and identity protection services through Haystack.

The agency has also set up a dedicated helpline at 888-844-1254 for questions related to the breach. Representatives are available from 8 a.m. to 11 p.m. Monday through Friday and from 9 a.m. to 6 p.m. on Saturdays, Eastern Time.

Security experts recommend that affected individuals enroll in the offered credit monitoring services, monitor bank and credit accounts for unauthorized activity, and remain alert to potential phishing scams that may exploit exposed information. Consumers may also consider placing fraud alerts or credit freezes with major credit bureaus.

Shamis & Gentile P.A., a national class action law firm specializing in data breach litigation, announced it is investigating the Patron Insurance Services incident. The firm stated that individuals whose personal information was exposed may be entitled to compensation.

Founded in 1984, Patron Insurance Services provides auto, homeowners, life, business, and commercial insurance to clients across the Metropolitan Washington, D.C. area, including Virginia and Maryland. The company has posted additional information about the breach on its official website.